MediaClone, Inc. Computer Forensic Solutions company, designs and manufacture computer forensic Mobil Platforms - high speed and high quality computer forensic imaging units - enabling computer forensic investigators in the lab or in the field, to capture data from many different kinds of media sources and interfaces in a very short period of time. The SuperImager Plus line of products, designed with extremely fast forensic imaging capabilities, and with a very strong hardware serve as platforms for a computer forensic investigator to perform many different kinds of operations in one place. The main unit functions capabilities are:

Under Linux:

Parallel multi-sessions Forensic Imaging operations running under Linux with extreme speed that can reach up to 31GB/Min

Capture data from Network Storages via iSCSI protocols

Remote Capture

S.M.A.R.T. test

Virtual Drive Emulator

Under Windows:

Complete data analysis using FTK, Encase, Nuix applications

Cellphone data extraction and analysis with the use of a third-party application such as Celebrite, Oxygen, XRY and more

Field Forensic Triage applications

Network traffic analysis and more

The solutions are cost effective, with the use of a fast parallel simultaneous operation that save time and money. In one pass over a "Suspect" drive, a user can run E01 Forensic imaging utilizing 16 threads to perform extremely fast full compression, 3 HASH value, AES Encryption, and a binary keyword search.

The SuperImager Plux Linux application can performs at 15-20% faster speed than the SuperImager Windows application, especially when user runs E01 with compression

The SuperImager Plus 8" Field Unit - is a mobile, compact an extremely fast Forensic Imaging unit that can serve as a complete Field Computer Forensic Investigation platform. The unit is running under Linux Ubuntu 64 bit. The SuperImager application can preforms extremely fast E01 compression, and allows user to control the number of compression threads (up to 16 threads). Forensic imaging speed can reach up to 29GB/min, and Hash authentication speed can reach up to 31GB/min, when using SSD drives.

The¡¡SuperImager Plus 8" Field Unit¡- is a mobile, compact an extremely fast Forensic Imaging unit that can serve as a complete Field Computer Forensic Investigation platform. The unit is running under Linux Ubuntu OS which is less targeted OS by malware, and it reduces the OS performance overhead, especially when it perform compression, by almost 20%. User can use to the unit to perform: Forensic Imaging with full E01 compression, Erase data includes DoD/ Security Erase/Enhanced Security Erase, View the data directly on Ubuntu Desktop, Encrypt data, Cellphone/Tablets data Extraction and Analysis, and Full Forensic Analysis like Encase/Nuix/FTK. The Unit can be expanded with optional expansion port or express port to support SCSI and 1394 storage devices

Forensic Images Destination: User can save Forensic Images to a local network shared folder for easy access and analysis, or save images to external USB3.0 RAID (encryption is optional) storage in a very good speed

Cross Copy from Ports and Interfaces: The user can choose to capture from one type of port, storage protocol and interface, and save the forensic Images into a different port, storage protocol and interface. The cross copy of data can be done between SAS/SATA/IDE/USB/SCSI/1394 interfaces

Application Features:

GUI: The application is built with large icons and is very simple and easy-to-navigate. In a few clicks user can set the operation, and it will be quickly up and running

Speed: Extremely fast

Tested with Hash verification operation with SHA-1 enabled the recorded top speed was 30GB/min with Solid State Drive, and 10GB/min with 1TB WD Blue SATA-3 Hard Disk Drive

Tested with Forensic Imaging operation of 1 to 2 with SHA-1 enabled the recorded sustained top speed was 29GB/min with 3 SSD of SanDisk 120GB Extreme II

Extreme Speed when performing Forensic capture with E01/Ex01 formats and with full Compression:

The new Linux-based SuperImager Plus application utilizes and optimizes multiple CPU cores to achieve one of the most efficient operations, while performing at incredibly high speeds with E01/Ex01 compression. The application allows users to manually select and adjust the number of threads and the level of compression used during each session.

Forensic data capture with Encase E01/Ex01 formats with full compression is widely used operation in the forensic industry, and generally requires a trade-off between speed, space, and time of uncompressing by the EnCase application.

Comparative tests show a 20% increase in speed when using the SuperImagerPlus Linux-based application over the SuperImager Windows-based application. Tests were performed with the same hardware and the same hard disk drives (filled with 43% of random data), and the same level 1 of compression. The Linux-based application was set to use 16 compression threads.

Parallel Forensic Imaging - Multiple Session Operations:¡¡User can run a multiple efficient parallel operation, since many ports are available. User can mix different type of operations, and each operation is set as a new independent session. Example of operations: erase data from a hard disk drive on one port, hash verify on second port, while forensic imaging 1 to1 on the remaining ports

Basic Parallel Forensic Imaging: The supported modes are:

Native SAS/SATA: 1 to 1, 1 to 2, 2 to 2, 2 to 3 and up to 2 to 4. The 2 to 3 imaging mode uses the e-SATA port with the need to supply external power to the e-SATA plugged device

USB3.0: 1 to 1, 1 to 2, 2 to 2

More Ports for Forensic Imaging:With the use of USB3.0 to SATA fast adapters and with the combination of e-SATA port, the unit can support up to 2 to 7 and up to 4 to 7 Forensic Imaging of SATA Hard Disk Drives. With the use of Express Port Option enabled, and the Optional Sonnet 4 SAS Ports Express Card Adapter, the application can support up to 2 to 6 Forensic Imaging of SAS Hard Disk Drives¡¡

Parallel operation ¨C Linux ElaboratedHard Drive Detection Application Screen: All hard disk drives and storage devices that are connected to the units will be scanned and displayed in one application screen called "the detection screen". User can tap on each drive to get its detailed info, as well as selecting it for the desired operation they are planning to use

Parallel Forensic Imaging: It depends on the number and the kind of ports that each model has. The application is very flexible in running multiple sources to multiple destinations, all in a simultaneous operations. The user has the flexibility to change a role of a port from Evidence to Suspect, and is not limited by the pre assigned Suspect ports. The session control application screen provides the user with a very comprehensive information and control over the running sessions, including all the setting of the session, and ability to abort the session

Parallel Forensic Imaging - Multiple Session Operations:¡¡User can run multiple efficient parallel operations and can mix different type of operations; for example erase hard disk drive on one port, hash verification on another port, while performing forensic imaging on other ports (each operation can function as a new independent session). The number of sessions also depends on the CPU: i5 -4 sessions, i7- 8 sessions

Saves Forensic Images to Network:¡¡Upload multiple Forensic images to a local network (DD, E01), simultaneously by using up to 8 parallel 1Gigabit/s network streams

Remote Capture - Capture Data from the Internal Hard Disk Drives of a Computer:¡¡Using USB or 1Gigabit Ethernet ports of the laptop/computer, enables capture without the needs to remove the hard drive from the laptop/computer (Speed is restricted to performance of the Laptop/PC CPU and the 1Gigabit/s connection)

The units have very firm hardware that enables those said applications to run with excellent performance

Expansion capabilities and the main hardware options:

Express Card Port Option: Optional port that needs to be pre-installed at time of purchasing in the main unit: This option gives the user the ability to plug and use a few kinds of express cards adapters to support capture and erase data from additional interfaces and devices. This option is very useful and saves in most of the cases the need for expensive and bulky expansion box. The Express Card adapters can be dual port 1394A/B, PCIE memory cards (Sony SxS), Mini-PCIE that are not supported by SATA protocols (are used in some MacBook Air, with M.2 (NGFF) form factor)

Expansion Port and Expansion Box Option: Optional expansion ports that enable user to plug in an Expansion Box in order to add-on many other devices: User can configure the main unit with only one connectivity port or Express Card Port or Expansion Port. The Expansion Port is mostly required when user needs to erase data from SCSI Hard Disk Drives. In addition to purchasing the Expansion Box, user can also purchase the SCSI 2 drives Kit which supports capture or erase from 2 SCSI Hard Disk drives. The SCSI 2 drives Kit includes all the cables, terminators and adapters that are needed to operate 2 SCSI hard disk drives. (The SCSI controller is installed inside the Expansion Box). The Expansion Box is also supplied with a low profile Express Card reader pre-installed inside the Expansion Box

USB3.0 to SATA adapters and Kits Option:Today USB3.0 technology is extremely fast and can run read data from SSD drives up to 20GB/min. With the use of USB3.0 to SATA 4 channel kit, user can convert 4 USB3.0 ports to 4 SATA ports on any of MediaClone units. The optional Kit is supplied with one external PS, and it includes all the cabling to power and connected the 4 USB3.0 to SATA adapters. The tested performance when running 4 adapters in parallel was measured at a very high speed, with a very little speed degradation

1394 Option: This option is supplied with 1394A/B Express Card. It is a very easy and quick way to add support for 1394 devices that can be daisy chained. This option works on units that support d installed with Expansion Port or Express Port options

USB3.0 to M.2 (NGFF) adapters Option: Currently, most laptops and tablets use M.2 (NGFF) Storage devices. This adapter supports connectivity to some of the newest SSD M.2 storage (Storage that is supported by SATA Protocols). There is a class of SSD drives with NGFF connectors that are not supported by SATA protocols and will not work with those adapters. Also the M.2 (NGFF) connectors use to comes in a variety of connectors and it was not standardized until 2014

USB3.0 to M.2 (NGFF) PCIE base adapters Option: A few adapters are available that Supports Mini PCIE SSD that been used in MacBook Air 2012+, MackBook Pro Retina 2012+

Warranty: One year warranty for the main unit. (It is not include cables and accessories)